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IN THE CLAIMS : 

1 1. (Previously Presented) An authentication comniunication systeni which includes 

2 (a) a storage medium having an area for storing digital information and (b) an access device for 

3 reading/writing digital information from/into the area, the authentication communication system 

4 comprising: 

5 a first authentication phase in which the access device transmits to the storage 



6 medium scrambled access information generated by scrambling access information which shows 

7 the area, and authenticates whether the storage medium is authorized according to a challenge- 

8 response authentication protocol using the scrambled access information; 

9 a second authentication phase in which the storage medium authenticates whether 

10 the access device is authorized; and 

1 1 a transfer phase in which, when the storage medium and the access device have 

12 authenticated each other as authorized devices, the storage medium extracts the access 

13 information from the scrambled access information that was used in the authentication protocol, 

14 and the access device reads/writes digital information from/into the area shown by the access 

15 information. 



1 2. (Original) The authentication communication system of Claim 1, 

2 wherein in the first authentication phase, 

3 the access device includes: 

4 an access information acquisition unit for acquiring the access information which 

5 shows the area; 

6 a random number acquisition unit for acquiring a random number; 
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7 a generation unit for generating random number access information by combining 

8 the access information and the random number; and 

9 an encryption unit for encrypting the random number access information 

10 according to an encryption algorithm, to generate the scrambled access information, 

1 1 the storage medium includes a response value generation unit for generating a 

12 response value from the scrambled access information, and 

13 the access device includes an authentication unit for authenticating whether the 

14 storage medium is authorized using the response value. 

1 3. (Original) The authentication communication system of Claim 2, 

2 wherein in the transfer phase, the storage medium includes: 

3 a decryption unit for decrypting the scrambled access information according to a 

4 decryption algorithm to obtain the random number access information; and 

5 a separation unit for separating the access information from the random number 

6 access information. 

1 4. (Original) The authentication communication system of Claim 3, 

2 wherein in the first authentication phase, 

3 the access device further includes a random number seed storage unit for storing a 

4 random number seed, and 

5 the random number acquisition unit acquires the random number by reading the 

6 random number seed from the random number seed storage unit. 
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1 5. (Original) The authentication communication system of Claim 4, 

2 wherein in the first authentication phase, the access device further writes the 

3 scrambled access information over the random number seed stored in the random number seed 

4 storage unit, as a new random number seed. 

1 6. (Original) The authentication communication system of Claim 3, 

2 wherein in the first authentication phase, 

3 the access device fiirther includes a random number seed storage unit for storing a 

4 random number seed, and 

5 the random number acquisition unit acquires the random number, by reading the 

6 random number seed fi-om the random number seed storage unit and generating the random 

7 number based on the random number seed. 

1 7. (Original) The authentication communication system of Claim 6, 

2 wherein in the first authentication phase, the access device further writes the 

3 random number over the random number seed stored in the random number seed storage unit as 

4 a new random number seed. 

1 8. (Original) The authentication communication system of Claim 3, 

2 wherein in the transfer phase, 

3 the storage medium, which stores digital information in the area, includes an 

4 encryption unit for reading the digital information from the area shown by the access information 

5 and encrypting the digital information according to an encryption algorithm to generate 

6 encrypted digital information, and 
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7 the access device, which reads the digital information from the area, includes a 

8 decryption unit for decrypting the encrypted digital information according to a decryption 

9 algorithm to obtain the digital information, the decryption algorithm being an algorithm for 
10 decrypting a cryptogram generated according to the encryption algorithm. 

1 9. (Original) The authentication communication system of Claim 3, 

2 wherein in the transfer phase, 

3 the access device, which writes digital information into the area, includes: 

4 a digital information acquisition unit for acquiring the digital information; and 

5 an encryption unit for encrypting the digital information according to an 

6 encryption algorithm to generate encrypted digital information, and 

7 the storage medium includes a decryption unit for decrypting the encrypted digital 

8 information according to a decryption algorithm to obtain the digital information, and writing the 

9 digital information into the area shown by the access information, the decryption algorithm being 
10 an algorithm for decrypting a cryptogram generated according to the encryption algorithm. 

1 10. (Original) The authentication communication system of Claim 3, 

2 wherein in the transfer phase, 

3 the access device, which writes digital information into the area, includes: 

4 a digital information acquisition unit for acquiring the digital information; 

5 a content key acquisition unit for acquiring a content key; 

6 a first encryption unit for encrypting the acquired content key according to a first 

7 encryption algorithm to generate an encrypted content key; 
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8 a second encryption unit for encrypting the encrypted content key according to a 

9 second encryption algorithm to generate a double-encrypted content key; and 

10 a third encryption unit for encrypting the digital information according to a 

1 1 second encryption algorithm using the content key, to generate encrypted digital information, 

12 the storage medium includes a decryption unit for decrypting the double- 

13 encrypted content key according to a first decryption algorithm to obtain the encrypted content 

14 key, and writing the encrypted content key into the area shown by the access information, and 

15 the storage medium further includes an area for storing the encrypted digital 

16 information. 

1 11. (Previously Presented) An authentication communication method used in an 

2 authentication communication system which includes (a) a storage medium having an area for 

3 storing digital information and (b) an access device for reading/writing digital information 

4 from/into the area, the authentication communication method comprising: 

5 a first authentication step in which the access device transmits to the storage 

6 medium scrambled access information generated by scrambling access information which shows 

7 the area, and authenticates whether the storage medium is authorized according to a challenge- 

8 response authentication protocol using the scrambled access information; 

9 a second authentication step in which the storage medium authenticates whether 

10 the access device is authorized; and 

1 1 a transfer step in which, when the storage medium and the access device have 

12 authenticated each other as authorized devices, the storage medium extracts the access 

13 information from the scrambled access information that was used in the authentication protocol, 
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14 and the access device reads/writes digital information from/into the area shown by the access 

15 information. 

1 12. (Previously Presented) A computer-readable storage medium which stores an 

2 authentication communication program for use in an authentication communication system (a) 

3 which includes a storage medium having an area for storing digital information and an access 

4 device for reading/writing digital information from/into the area, and (b) in which the digital 

5 information is transferred after each of the storage medium and the access device authenticates 

6 each other as authorized devices, the authentication communication program comprising: 

7 a first authentication step in which the access device transmits to the storage 

8 medium scrambled access information generated by scrambling access information which shows 

9 the area, and authenticates whether the storage medium is authorized according to a challenge- 

10 response authentication protocol using the scrambled access information; 

1 1 a second authentication step in which the storage medium authenticates whether 

12 the access device is authorized; and 

13 a transfer step in which, when the storage medium and the access device have 

14 authenticated each other as authorized devices, the storage medium extracts the access 

15 information from the scrambled access information that was used in the authentication protocol, 

16 and the access device reads/writes digital information from/into the area shown by the access 

17 information. 

1 13-16. (Cancelled) 
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1 17. (Previously Presented) An access device for reading/writing digital information 

2 from/into an area in a storage medium, comprising: 

3 authentication means for transmitting to the storage medium scrambled access 

4 information generated by scrambling access information which shows the area, and 

5 authenticating whether the storage medium is authorized according to a challenge-response 

6 authentication protocol using the scrambled access information; 

7 proving means for proving to the storage medium that performs authentication of 

8 the access device that whether the access device is authorized; and 

9 . access means for reading and writing digital information from and to the area 



10 shown by the access information, which is extracted by the storage medium from the scrambled 

1 1 access information that was used in the authentication protocol, when the storage medium and 

12 the access device have authenticated each other as authorized devices. 



1 18. (Previously Presented) The access device of Claim 17, 

2 wherein the authentication means includes: 

3 an access information acquisition unit for acquiring the access information which 

4 shows the area; 

5 a random number acquisition unit for acquiring a random number; 

6 a generation unit for generating random number access information by combining 

7 the access information and the random number; 

8 an encryption unit for encrypting the random number access information 

9 according to an encryption algorithm, to generate the scrambled access information; and 
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10 a transmission unit for transmitting the scrambled access information to the 

11 storage medium, 

12 the storage medium generates a response value from the scrambled access 

13 information, and transmits the response value to the access device, and 

14 the authentication means further includes: 

15. a reception unit for receiving the response value from the storage medium, 

16 and 

17 an authentication unit for authentication whether the storage medium is 

18 authorized, using the response value. 

1 19. (Previously Presented) A storage medium having an area for storing digital 

2 information wherein an access device reads/writes digital information from/into the area, 

3 comprising: 

4 proving means for receiving scrambled access information, generated by 

5 scrambling access information that shows the area, from the access device and 

6 proving whether the storage medium is authorized to the access device that 

7 performs authentication of the storage medium according to a challenge-response authentication 

8 protocol using the scrambled access information; 

9 authentication means for authenticating whether the access device is authorized; 

10 and 

1 1 extraction means for extracting the access information from the scrambled access 

12 information received by the reception means when the storage medium and the access device 

13 have authenticated each other as authorized devices; 
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14 wherein the access device reads/writes digital information from/into the area 

1 5 shown by the access information extracted by the extraction means. 

1 20. (Previously Presented) The storage medium of Claim 19, 

2 wherein the extraction means includes: 

3 a decryption unit for decrypting the scrambled access information according to a 

4 decryption algorithm to obtain random number access information; and 

5 a separation unit for separating the access information from the random number 

6 access information. 

1 21. (Previously Presented) An authentication communication method comprising: 

2 transmitting scrambled access information from an access device to a storage 

3 medium, wherein the scrambled access information is generated by scrambling access 

4 information having an area; 

5 authenticating whether the storage medium is authorized in the access device 

6 according to a challenge-response authentication protocol using the scrambled access 

7 information; 

8 authenticating whether the access device is authorized in the storage medium; and 

9 when the storage medium and the access device have authenticated each other as 

10 authorized devices, extracting the access information from the scrambled access information and 

1 1 reading/writing digital information from/into the area shown by the access information. 
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1 22. (Previously Presented) An access device for reading/writing digital information 

2 from/into an area in a storage medium, said access device comprising: 

3 an authentication unit operable to transmit to the storage medium scrambled 

4 access information generated by scrambling access information which shows the area, and 

5 authenticate whether the storage medium is authorized according to a challenge-response 

6 authentication protocol using the scrambled access information; 

7 a proving unit operable to prove to the storage medium that performs 

8 authentication of said access device whether said access device is authorized; and 

9 an access unit operable to read/write digital information from/to the area shown 

10 by the access information, which is extracted by the storage medium from the scrambled access 

1 1 information that was used in the authentication protocol, when the storage medium and said 

12 access device have authenticated each other as authorized devices. 

1 23. (Previously Presented) A storage medium having an area for storing digital 

2 information wherein an access device reads/writes digital information from/into the area, said 

3 storage medium comprising: 

4 a proving unit operable to receive scrambled access information, generated by 

5 scrambling access information which shows the area, from the access device, and prove whether 

6 said storage medium is authorized to the access device that performs authentication of said 

7 storage medium according to a challenge-response authentication protocol using the scrambled 

8 access information; 

9 an authentication unit operable to authenticate whether the access device is 
10 authorized; and 
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11 an extraction unit operable to extract the access information from the scrambled 

12 access information when said storage medium and the access device have authenticated each 

13 other as authorized devices; 

14 wherein the access device is operable to read/write digital information from/into 

15 the area shown by the access information extracted by said extraction unit. 

1 24. (Previously Presented) The authentication communication system of Claim 1, 

2 wherein the access information comprises address and data size information. 

1 25. (Previously Presented) The authentication communication method of Claim 11, 

2 wherein the access information comprises address and data size information. 

1 26. (Previously Presented) The computer-readable storage medium of Claim 12, 

2 wherein the access information comprises address and data size information. 

1 27. (Previously Presented) The access device of Claim 17, wherein the access 

2 information comprises address and data size information. 

1 28. (Previously Presented) The storage medium of Claim 19, wherein the access 

2 information comprises address and data size information. 

1 29. (Previously Presented) The authentication communication method of Claim 21, 

2 wherein the access information comprises address and data size information. 

1 30. (Previously Presented) The access device of Claim 22, wherein the access 

2 information comprises address and data size information. 
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1 31. (Previously Presented) The storage medium of Claim 23, wherein the access 

2 information comprises address and data size information. 
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